Palo Alto Warns of Zero-Day Bug in Firewalls Using GlobalProtect Portal VPN

Blog WriterThe Hacker News - Original news source is thehackernews.com

A new zero-day vulnerability has been disclosed in Palo Alto Networks GlobalProtect VPN that could be abused by an unauthenticated network-based attacker to execute arbitrary code on affected devices with …

13 New Flaws in Siemens Nucleus TCP/IP Stack Impact Safety-Critical Equipment

Blog WriterThe Hacker News - Original news source is thehackernews.com

As many as 13 security vulnerabilities have been discovered in the Nucleus TCP/IP stack, a software library now maintained by Siemens and used in three billion operational technology and IoT …

14 New Security Flaws Found in BusyBox Linux Utility for Embedded Devices

Blog WriterThe Hacker News - Original news source is thehackernews.com

Cybersecurity researchers on Tuesday disclosed 14 critical vulnerabilities in the BusyBox Linux utility that could be exploited to result in a denial-of-service (DoS) condition and, in select cases, even lead …

Microsoft Issues Patches for Actively Exploited Excel, Exchange Server 0-Day Bugs

Blog WriterThe Hacker News - Original news source is thehackernews.com

Microsoft has released security updates as part of its monthly Patch Tuesday release cycle to address 55 vulnerabilities across Windows, Azure, Visual Studio, Windows Hyper-V, and Office, including fixes for two actively …

Robinhood Trading App Suffers Data Breach Exposing 7 Million Users’ Information

Blog WriterThe Hacker News - Original news source is thehackernews.com

Robinhood on Monday disclosed a security breach affecting approximately 7 million customers, roughly a third of its user base, that resulted in unauthorized access of personal information by an unidentified threat …

U.S. Charges Ukrainian Hacker for Kaseya Attack; Seizes $6 Million from REvil Gang

Blog WriterThe Hacker News - Original news source is thehackernews.com

The U.S. government on Monday charged a Ukrainian suspect, arrested in Poland last month, with deploying REvil ransomware to target multiple businesses and government entities in the country, including perpetrating …

Suspected REvil Ransomware Affiliates Arrested in Global Takedown

Blog WriterThe Hacker News - Original news source is thehackernews.com

Romanian law enforcement authorities have announced the arrest of two individuals for their roles as affiliates of the REvil ransomware family, dealing a severe blow to one of the most prolific cybercrime …

Experts Detail Malicious Code Dropped Using ManageEngine ADSelfService Exploit

Blog WriterThe Hacker News - Original news source is thehackernews.com

At least nine entities across the technology, defense, healthcare, energy, and education industries were compromised by leveraging a recently patched critical vulnerability in Zoho’s ManageEngine ADSelfService Plus self-service password management and single …